CVE-2011-4828

This Metasploit module exploits an unauthenticated file upload vulnerability in V-CMS 1.0, allowing arbitrary PHP code execution by uploading a malicious file via the inline_image_upload.php endpoint.

This Metasploit module exploits an unauthenticated file upload vulnerability in V-CMS (CVE-2011-4828) by uploading a malicious PHP file disguised as an image, then executing it via a GET request to achieve remote code execution.